Sophie

Sophie

distrib > Scientific%20Linux > 5x > x86_64 > by-pkgid > 130701790bf2d95e902edf16031ff596 > files > 55

autofs-5.0.1-0.rc2.164.el5_8.src.rpm

autofs-5.0.4 - fix double free in expire_proc()

From: Ian Kent <raven@themaw.net>

In state.c:expire_proc() the function expire_proc_cleanup() is called
which frees the parameter structure but automount frees this again in
the following line.
---

 daemon/state.c |    1 -
 1 file changed, 1 deletion(-)


--- autofs-5.0.1.orig/daemon/state.c
+++ autofs-5.0.1/daemon/state.c
@@ -298,7 +298,6 @@ static enum expire expire_proc(struct au
 		error(ap->logopt,
 		      "expire thread create for %s failed", ap->path);
 		expire_proc_cleanup((void *) ea);
-		free(ea);
 		return EXP_ERROR;
 	}
 	ap->exp_thread = thid;